IKE Does Not Start

Chuan Liu · ‎05-21-2008

Hi,

I have an ASA5510. When I put the command 'crypto map MAP 20 set peer a.b.c.d', an error message "[IKEv1]: Ignoring msg to mark SA with specified coordinates <MAP, 20> dead" comes out. What does this mean?

When I turned out debug crypto isakmp 127, no messages come out.

How can I start IKE?

Thanks in advance.

alanajjar · ‎05-21-2008

Hi,

I am not sure about your full configuration, but if you want to enable ISAKMP on a specific intrface use the command:

Crypto isakmp enable interface_name

The ISAKMP should start when you define this, if this is not the case, post your config, and make some debugging, for isakmp and ipsec.

regards

Chuan Liu · ‎05-22-2008

Hi,

It starts working after a reload.

Thanks for your response